Merge pull request #6 from intel-analytics/branch-2.5.0b2

fix dependabot alerts (intel-analytics#12014)
SANKHA1 · Oct 16, 2024 · 0df8d85 · 0df8d85
2 parents 20419fd + 1763fe6
commit 0df8d85
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/.github/actions/llm/download-llm-binary/action.yml b/.github/actions/llm/download-llm-binary/action.yml
@@ -5,7 +5,7 @@ runs:
   using: "composite"
   steps:
     - name: Download all build files
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@4.1.7
     - name: Move build resources
       shell: bash
       run: |

diff --git a/.github/workflows/llm-harness-evaluation.yml b/.github/workflows/llm-harness-evaluation.yml
@@ -216,7 +216,7 @@ jobs:
           OUTPUT_PATH="results_$DATE"
           echo "OUTPUT_PATH=$OUTPUT_PATH" >> $GITHUB_ENV
       - name: Download all results
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@4.1.7
         with:
           name: harness_results
           path: ${{ env.OUTPUT_PATH }}        

diff --git a/python/requirements/nano/requirements_torch.txt b/python/requirements/nano/requirements_torch.txt
@@ -11,4 +11,4 @@ torchmetrics==0.11.0
 opencv-python-headless
 PyTurboJPEG
 opencv-transforms
-cryptography==42.0.0
+cryptography